Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/oE_1AgPCtnaFaMCLevKrq6JA6ow.roa
File: oE_1AgPCtnaFaMCLevKrq6JA6ow.roa (raw, json)
Hash identifier: qBy55DjJrOCIYzSWpauOd8y7YqJPRSHESdiDPcLUS5A=
Subject key identifier: A0:4F:F5:02:03:C2:B6:76:85:68:C0:8B:7A:F2:AB:AB:A2:40:EA:8C
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194EE876EE920183176432E0E053778EDA4
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/oE_1AgPCtnaFaMCLevKrq6JA6ow.roa
Signing time: Mon 10 Feb 2025 06:24:00 +0000
ROA not before: Mon 10 Feb 2025 06:24:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 46.8.97.0/24 maxlen: 24
46.8.116.0/24 maxlen: 24
46.8.200.0/24 maxlen: 24
46.8.201.0/24 maxlen: 24
46.8.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:87:6e:e9:20:18:31:76:43:2e:0e:05:37:78:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Feb 10 06:24:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04ff50203c2b6768568c08b7af2ababa240ea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:e1:68:70:24:71:8d:ba:1b:18:0a:fc:e5:
97:26:a5:f7:42:5b:c5:19:14:93:17:95:cc:58:44:
bc:ad:05:5f:3b:78:00:b4:6f:c0:db:1b:8e:34:de:
d1:78:b6:7d:5b:e5:40:84:22:d6:93:7e:4a:4b:20:
2c:c1:fd:86:4b:7b:a8:c0:a5:0b:b1:09:e1:73:32:
f0:c8:1a:3f:3e:10:5c:5c:ee:52:40:ff:30:d4:3a:
fe:77:85:28:e9:69:ed:2c:b1:8d:c4:e8:c4:3b:26:
18:08:f4:d5:10:1d:0b:d2:d0:a0:20:c2:e8:b5:ec:
83:ad:ec:f0:a9:19:a0:4a:d0:75:ed:aa:46:9c:60:
e2:50:4f:88:f9:26:81:53:49:f3:80:50:77:40:22:
96:ef:11:18:45:c3:ae:13:5f:85:45:f2:ad:4c:b9:
b7:ff:b0:f0:27:5f:7a:76:85:ef:d3:82:30:a9:88:
35:fb:3b:aa:37:bf:4f:c3:5a:79:6e:9a:0b:fa:22:
81:47:bf:65:d0:a9:9f:8e:41:e1:6f:71:b4:20:70:
3c:4e:75:8d:bf:94:8a:dd:be:6d:71:42:a8:0e:9c:
c4:1e:f3:18:4b:74:95:af:12:02:66:13:55:b3:e0:
c2:0c:05:fc:cb:97:90:f8:03:6d:d2:f8:35:88:ba:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:F5:02:03:C2:B6:76:85:68:C0:8B:7A:F2:AB:AB:A2:40:EA:8C
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/oE_1AgPCtnaFaMCLevKrq6JA6ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.97.0/24
46.8.116.0/24
46.8.200.0/23
46.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7c:05:1c:c5:ff:d0:8a:87:33:7f:d2:db:ab:4f:bd:29:40:
1d:b0:59:ab:e7:5a:b0:3f:81:48:c4:f1:fb:1a:c8:fa:0b:8d:
61:96:38:03:25:00:a2:c8:b2:5c:b0:47:e8:0a:40:d7:fa:e8:
08:ee:33:3f:84:48:84:cb:cd:71:8e:9d:6e:8f:31:49:a6:3f:
37:35:b0:33:9b:c2:ba:fb:0d:58:fd:02:a8:ee:93:03:e1:df:
46:14:61:34:60:16:53:bf:0a:ba:db:ad:77:7b:73:78:54:c4:
6a:84:d1:32:29:13:e9:70:3e:c1:c7:4b:f9:8a:09:55:7b:90:
04:69:ed:f4:a9:fa:dc:56:d3:a9:73:1a:fa:c8:29:08:b1:4f:
bf:42:0f:ad:20:eb:39:3c:b8:10:19:64:64:6d:4d:74:0f:03:
0c:95:2b:19:73:81:17:ed:9c:57:60:da:5c:a8:4b:03:75:7f:
78:ef:d8:de:9a:15:96:f5:db:8d:2e:85:a5:d2:bd:ca:c0:1a:
76:bf:90:ca:8b:6b:11:a7:bc:ba:4d:c2:f1:c1:3a:ed:c1:4b:
e5:cd:2c:57:93:62:67:b8:c0:9a:cc:64:44:62:f6:85:81:b8:
3d:b8:b6:51:b9:50:0f:f2:bb:e9:5b:5b:97:e0:d2:f9:34:d9:
24:99:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:37 2025 by rpki-client